Information Security Magazine

Hackers are using legitimate red team tool Hexstrike-AI to simplify and speed up vulnerability exploitation

A new Cobalt study finds healthcare organizations among the slowest at resolving serious vulnerabilities

A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub

The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook

A massive IPTV privacy network has been uncovered distributing unlicensed content from major brands including Apple TV, Disney+, HBO, Netflix and more

Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign

Barracuda observed new methods to disguise phishing links in Tycoon phishing attacks, which are designed to bypass automated email security systems

Evertec subsidiary Sinqia has posted details of an attempt to steal $130m from two B2B partners

The US Immigration agency has resumed a $2m contract with the Graphite spyware developer, now owned by US investor AE Industrial Partners

A malicious npm package “nodejs-smtp” has been discovered impersonating nodemailer and injecting code to drain crypto wallets

Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file

Jaguar has proactively shut down systems to mitigate the impact of the incident, amid reports that workers at a UK manufacturing plant had been told to stay at home

The UK National Cyber Security Centre thinks public disclosure programs could help mitigate AI safety threats

Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data

Silver Fox APT abuses Microsoft-signed drivers to kill antivirus and deploy ValleyRAT remote-access backdoor

A vulnerability in the WordPress Paid Memberships Subscription plugin could lead to unauthenticated SQL injection on affected sites

Pennsylvania’s Attorney General confirmed the OAG had refused to pay a ransom demand to the attackers after files were encrypted

The campaign shows APT29’s intentions to “cast a wider net in their intelligence collection efforts,” said Amazon

Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts

WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack